Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
234 matching stories — announcement, in Detection Engineering — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database
Google’s September Pixel update fixes 110 vulnerabilities, including a modem flaw being used in limited, targeted attacks.
The rapid emergence of AI has radically changed a host of professions, with software engineering and development perhaps the most transformed of all pursuits. The usual “solitary ritual” of a developer writing code for hours is giving way to collaboration with an army of chatbots. In its 2025 report on the State of AI-Assisted Software Development, Google Cloud researchers found that even then, LLM usage was almost universal among coders, with 90% of developer respondents using AI as part of the
Every intrusion involves more than just malware or a compromised IP — it involves a threat actor, the tools they wield, the infrastructure they operate through, and the victim they target. Understanding how these elements connect is often more valuable than looking at any one of them in isolation. That’s why Prime Architect visualizes adversary […] The post Diamond Model in Deep Threat Research: The Four Corners of an Intrusion appeared first on SOC Prime.
Not all indicators of compromise are created equal. A malicious IP address can be swapped out in minutes; an adversary’s core tactics, techniques, and procedures take months — sometimes years — to rebuild. That’s why Prime Architect visualizes threat indicators using the Pyramid of Pain — generated automatically as part of Deep Threat Research analysis, […] The post Pyramid of Pain in Deep Threat Research: What Really Hurts the Adversary appeared first on SOC Prime.
Understanding how an attacker moves through your environment matters just as much as knowing that they got in. That’s why Prime Architect’s Agentic Threat Research module visualizes attacks using the Cyber Kill Chain — generated automatically as part of Deep Threat Research analysis, giving your team a clear, stage-by-stage map of adversary behavior built directly […] The post Cyber Kill Chain in Deep Threat Research: Stage-by-Stage Attack Visibility appeared first on SOC Prime
File change monitoring can tell organizations much more than whether an important file was modified. Modern file integrity monitoring (FIM) can provide valuable event data about what changed, when and where it happened, and who or what was responsible. Combined with real-time monitoring and other security telemetry, this information can help security, IT, OT, and […] The post Who—or What—Changed That File? File Change Monitoring for Modern Security appeared first on Atomicorp -- Own Your S
In July 2026, an autonomous AI agent escaped an OpenAI security evaluation environment, reached the public Internet, compromised third-party infrastructure, and ultimately penetrated production systems at Hugging Face. This was not a hypothetical demonstration. Hugging Face reconstructed approximately 17,600 attacker actions grouped into roughly 6,280 clusters between July 9 and July 13. According to Hugging […] The post When AI Agents Become Attackers: Lessons from the OpenAI and Hugging
Anvilogic is now listed in the Snowflake, Databricks, and AWS marketplaces, so security teams can fund the SOC with committed spend they have already signed.
The CMMC Phase 2 suspension gives defense contractors more time to prepare, not a reason to stop preparing. Here are some reminders and recommendations for the meantime. The Cybersecurity Maturity Model Certification (CMMC) program was headed toward an important milestone on November 10, 2026. That was when Phase 2, also referred to as Phase I, […] The post CMMC Phase 2 Suspension Isn’t a Reason to Stop Preparing appeared first on Atomicorp -- Own Your Security. Protect Your Data..
A triage prototype proves a model can reason. It does not prove your team wants to own the runtime under a growing collection of production security agents.
Our Black Hat USA 2026 session on running the full SOC lifecycle with governed agents, across onboarding, search, detection, and investigation.
The current wave of AI coding assistants and agentic orchestration platforms is giving the age-old build vs buy decision a new twist.  Prototyping agentic workflows for detection engineering is more accessible than ever, but sustaining The post Beyond DIY in the Age of AI: The CardinalOps Detection Engineering Foundation appeared first on CardinalOps.
Security teams are facing an exciting new opportunity. Functionality that once required specialized engineering teams and substantial development resources can now be prototyped in days using frontier AI models, coding copilots, orchestration frameworks, and agentic The post Security’s New Build vs. Buy Moment: Vibe Coding FTW, or Detection DI-Why? appeared first on CardinalOps.
Detection engineering is getting a very well-deserved moment in the limelight. The 2026 Gartner Hype Cycle for Security Operations introduced a new Detection Engineering Automation Solutions (DEAS) category for “products and services that facilitate developing, The post Detection Engineering Gets Its Due: Takeaways from the 2026 Gartner Hype Cycle for SecOps appeared first on CardinalOps.